frontpage.fyi
AT-based link agregator. Mirror of https://github.com/likeandscribe/frontpage
Pin actions versions (#304)
* Pin checkout action to commit ID
* Use full commit hash
* Update labeller
* Update go
* actions/cache
* Missed go action
* pnpm
* node
* Add note to copilot instructions
authored by
GitHub
bd57b6b0
8b5135d6
+1
.github/copilot-instructions.md
+1
.github/copilot-instructions.md
···
30
30
- `pnpm exec turbo run --affected type-check`
31
31
- Lexicon changes (`lexicons/**`) trigger Go-based `glot lint` and `glot compat`.
32
32
- Label sync on PRs; `sync-tangled` push job mirrors `main` to tangled.sh (uses secret).
33
+
- When adding new actions, prefer fixed SHAs over floating tags for stability. Include the version in a comment.
33
34
34
35
## Setup / bootstrap
35
36
1. Ensure Node 22.18 available (`nvm use`).
+2
-2
.github/workflows/label.yml
+2
-2
.github/workflows/label.yml
···
8
8
pull-requests: write
9
9
runs-on: ubuntu-latest
10
10
steps:
11
-
- uses: actions/checkout@v4
11
+
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
12
12
with:
13
13
fetch-depth: 2
14
-
- uses: actions/labeler@v5
14
+
- uses: actions/labeler@634933edcd8ababfe52f92936142cc22ac488b1b # v6.0.1
15
15
with:
16
16
sync-labels: true
+6
-6
.github/workflows/lexicon-check.yml
+6
-6
.github/workflows/lexicon-check.yml
···
12
12
runs-on: ubuntu-latest
13
13
steps:
14
14
- name: Checkout code
15
-
uses: actions/checkout@v4
15
+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
16
16
17
17
- name: Setup Go
18
-
uses: actions/setup-go@v5
18
+
uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6.1.0
19
19
with:
20
20
go-version: "stable"
21
21
cache: true
22
22
23
23
- name: Cache glot binary
24
-
uses: actions/cache@v4
24
+
uses: actions/cache@a7833574556fa59680c1b7cb190c1735db73ebf0 # v5.0.0
25
25
id: cache-glot
26
26
with:
27
27
path: ~/go/bin/glot
···
40
40
runs-on: ubuntu-latest
41
41
steps:
42
42
- name: Checkout code
43
-
uses: actions/checkout@v4
43
+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
44
44
45
45
- name: Setup Go
46
-
uses: actions/setup-go@v5
46
+
uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6.1.0
47
47
with:
48
48
go-version: "stable"
49
49
cache: true
50
50
51
51
- name: Cache glot binary
52
-
uses: actions/cache@v4
52
+
uses: actions/cache@a7833574556fa59680c1b7cb190c1735db73ebf0 # v5.0.0
53
53
id: cache-glot
54
54
with:
55
55
path: ~/go/bin/glot
+15
-15
.github/workflows/pr.yml
+15
-15
.github/workflows/pr.yml
···
12
12
formatting:
13
13
runs-on: ubuntu-latest
14
14
steps:
15
-
- uses: actions/checkout@v4
15
+
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
16
16
17
17
- name: Install pnpm
18
-
uses: pnpm/action-setup@v4
18
+
uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0
19
19
20
20
- name: Setup Node.js environment
21
-
uses: actions/setup-node@v4
21
+
uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0
22
22
with:
23
23
node-version-file: .nvmrc
24
24
cache: "pnpm"
···
30
30
test:
31
31
runs-on: ubuntu-latest
32
32
steps:
33
-
- uses: actions/checkout@v4
33
+
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
34
34
with:
35
35
fetch-depth: 0
36
36
filter: "blob:none"
37
37
38
38
- name: Cache turbo build setup
39
-
uses: actions/cache@v4
39
+
uses: actions/cache@a7833574556fa59680c1b7cb190c1735db73ebf0 # v5.0.0
40
40
with:
41
41
path: .turbo
42
42
key: ${{ runner.os }}-turbo-${{ github.sha }}
···
44
44
${{ runner.os }}-turbo-
45
45
46
46
- name: Install pnpm
47
-
uses: pnpm/action-setup@v4
47
+
uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0
48
48
49
49
- name: Setup Node.js environment
50
-
uses: actions/setup-node@v4
50
+
uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0
51
51
with:
52
52
node-version-file: .nvmrc
53
53
cache: "pnpm"
···
58
58
lint:
59
59
runs-on: ubuntu-latest
60
60
steps:
61
-
- uses: actions/checkout@v4
61
+
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
62
62
with:
63
63
fetch-depth: 0
64
64
filter: "blob:none"
65
65
66
66
- name: Cache turbo build setup
67
-
uses: actions/cache@v4
67
+
uses: actions/cache@a7833574556fa59680c1b7cb190c1735db73ebf0 # v5.0.0
68
68
with:
69
69
path: .turbo
70
70
key: ${{ runner.os }}-turbo-${{ github.sha }}
···
72
72
${{ runner.os }}-turbo-
73
73
74
74
- name: Install pnpm
75
-
uses: pnpm/action-setup@v4
75
+
uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0
76
76
77
77
- name: Setup Node.js environment
78
-
uses: actions/setup-node@v4
78
+
uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0
79
79
with:
80
80
node-version-file: .nvmrc
81
81
cache: "pnpm"
···
86
86
typecheck:
87
87
runs-on: ubuntu-latest
88
88
steps:
89
-
- uses: actions/checkout@v4
89
+
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
90
90
with:
91
91
fetch-depth: 0
92
92
filter: "blob:none"
93
93
94
94
- name: Cache turbo build setup
95
-
uses: actions/cache@v4
95
+
uses: actions/cache@a7833574556fa59680c1b7cb190c1735db73ebf0 # v5.0.0
96
96
with:
97
97
path: .turbo
98
98
key: ${{ runner.os }}-turbo-${{ github.sha }}
···
100
100
${{ runner.os }}-turbo-
101
101
102
102
- name: Install pnpm
103
-
uses: pnpm/action-setup@v4
103
+
uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0
104
104
105
105
- name: Setup Node.js environment
106
-
uses: actions/setup-node@v4
106
+
uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0
107
107
with:
108
108
node-version-file: .nvmrc
109
109
cache: "pnpm"
+1
-1
.github/workflows/tangled.yml
+1
-1
.github/workflows/tangled.yml